Bridge: machine with no IP address of its own, between the Internet and a local network
Operates on the Ethernet level
"Invisible" to the outside world
Is able to use PF for filtering and nat/rdr